Top Cyber Security Jobs in Montreal

Build and operate enterprise identity and access management systems at Affirm. Responsibilities include IAM lifecycle operations, access troubleshooting, automation, backend services, APIs, integrations, monitoring, and production support. The role focuses on SailPoint, Auth0, workforce identity events, secure infrastructure, and collaboration with Security, IT, and Engineering. Candidates should have software engineering experience, backend development skills, cloud familiarity, and knowledge of IAM technologies.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Designs and presents secure network, cloud, and cybersecurity solutions for public-sector customers. Responsibilities include architectural design, proof-of-concept evaluations, technical workshops, RFP responses, solution roadmaps, troubleshooting, and collaboration with sales teams. The role requires expertise in networking, firewalls, VPNs, cloud security, SD-WAN, SASE, zero trust, identity, encryption, and security operations, along with strong presentation, communication, whiteboarding, and bilingual French-English skills. Regional travel is required, with occasional travel elsewhere.

Supports channel sales teams as the primary technical presales and post-sales resource for security solutions. Qualifies leads, participates in sales calls, explains product features and integrations, advises customers and partners on networking and security technologies, resolves technical issues with support teams, and provides customer training. The role requires strong networking, encryption, authentication, presentation, and technical sales skills, along with travel as needed.

Build AI-driven systems for blockchain security, including smart contract analysis, vulnerability discovery, exploit analysis, threat detection, and security investigations. Develop AI agents that reason over codebases, protocol interactions, transactions, and wallet activity. Collaborate with security researchers and infrastructure teams on monitoring and incident response while researching blockchain attack techniques, Web3 infrastructure, and AI security trends.

Protect gaiia’s products, cloud infrastructure, customer data, and teams through application security, cloud security, vulnerability and incident management, GRC, and security enablement. The role includes threat modeling, architecture reviews, penetration testing, IAM improvements, compliance support, incident response, security roadmap ownership, and collaboration with engineering, sales, legal, and leadership.

Leads endpoint security engineering teams and oversees enterprise endpoint protection platforms, operational readiness, policy enforcement, platform health, security initiatives, governance, risk management, vendor relationships, and capability roadmaps. Manages team performance, backlogs, projects, metrics, incident troubleshooting, audits, and continuous improvement while partnering with infrastructure, architecture, workplace technology, and security operations stakeholders.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Own infrastructure security for LiveKit’s production platform. Map cloud security posture, prioritize and remediate infrastructure risks, harden IAM, secrets, networks, tenant isolation, and media storage, and build secure infrastructure-as-code guardrails. Partner with compliance teams on PCI-DSS and ISO 27001 controls and automate audit evidence. The role requires cloud, Kubernetes, Terraform, scripting, and production infrastructure security experience, with AI security and real-time media experience preferred.

Designs, implements, and operates security controls across corporate IT and SaaS environments spanning cloud and on-premises infrastructure. Leads cloud, platform, application, vulnerability-management, detection, and incident-response initiatives. Partners with engineering and operations teams to embed security into architectures, CI/CD pipelines, and infrastructure-as-code workflows; drives risk-based remediation and improves control effectiveness. Serves as a technical escalation point during complex incidents and mentors junior team members.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the detection lifecycle, advance detection-as-code with Git, testing, CI/CD, and observability, and improve data ingestion and enrichment. Evaluate AI-assisted security capabilities, translate threat intelligence into detections, and partner with Security Operations during investigations and incident exercises. The role requires strong Python and SQL skills, SIEM expertise, AWS and Linux knowledge, and independent project leadership.

Designs and maintains secure cloud, on-premises, and containerized environments while strengthening cyber defense detection engineering. Responsibilities include log ingestion and platform maintenance, monitoring and investigating alerts across SIEM, EDR, and XDR tools, developing and tuning detection rules and threat signatures, reducing false positives, and identifying mitigation and response opportunities. The role administers Microsoft Sentinel, CrowdStrike, Microsoft Purview, and Jira, and collaborates with development, infrastructure, and security teams.

Serves as the primary security services contact for customers, guiding the integration and effective use of Akamai web security products. Collaborates with cross-functional and sales teams to understand customer needs, tune solutions, implement security and web technologies, and improve delivery methodologies. Requires expertise in internet protocols, CDN operation, web development, IT systems, security practices, consultative customer engagement, and project management. Must be able to obtain and maintain Canadian government clearance.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Develop API integration and automation code in Python to connect vulnerability management tools with other security platforms. The role focuses on building integrations between systems, with vulnerability-tool and broader security-tool API experience preferred. It does not involve operating security tools, analyzing vulnerabilities, or administering DevSecOps platforms.

Leads security engineering strategy and remains hands-on designing, coding, and scaling enterprise security capabilities. Builds automation, platforms, APIs, and reusable frameworks; guides cloud, infrastructure, identity, application, endpoint, and AI security. Establishes architectures, standards, and guardrails, influences executives and engineering teams, evaluates technology risks, mentors senior technical staff, and advances secure adoption of emerging technologies across cloud-native and SaaS environments.

Leads the strategy, lifecycle, financial performance, positioning, and growth of Arctic Wolf’s Endpoint Security portfolio. The role oversees product expansion, cross-sell opportunities, competitive analysis, M&A integration, and integration with managed security services. It also leads a global product management team, establishes product metrics and operating cadences, and represents endpoint strategy to executives, customers, analysts, and partners.

Provides pre-sales technical support and technical account management for Vectra’s AI-driven cybersecurity platform. Responsibilities include customer discovery, product demonstrations, proofs of concept, security architecture guidance, technology reviews, integrations, deployment reviews, and technical relationship development. The role requires expertise in security platforms, networking, cloud security, incident response, attacker progression, and security processes, along with strong communication and large-account management skills. Regional travel is required as needed.

Serve as the IAM subject-matter expert for a multi-client environment. Establish governance, evaluate and roadmap IAM technologies, optimize RBAC and ABAC models, automate identity processes, support identity protection initiatives, maintain architecture and process documentation, and drive continuous improvement. Collaborate with internal and external stakeholders while advising leadership and strengthening the organization’s security posture.

Designs and implements security solutions across application, infrastructure, enterprise, and observability domains. Responsibilities include threat modeling, integrating security into development workflows, automating detection and response using AI, incident response, regulatory support, mentoring, and shaping security priorities. The role requires collaboration with engineering, product, compliance, and vendors in a regulated fintech environment.

Build and maintain security automation, vulnerability management tooling, detection rules, CI/CD integrations, and supply chain security controls. Support application, cloud, identity, access, DLP, secrets, and data warehouse security programs. Partner with engineering teams on secure architecture and remediation, manage security policies, conduct access reviews, and contribute to security standards and mentorship.

Build and operate infrastructure security platforms centered on workload identity, service-to-service authentication, authorization, and short-lived credentials. Replace static secrets with identity-based systems, develop identity-authenticated proxies and APIs, and unify authorization policy management. Partner with platform and application teams to drive adoption, migrate legacy systems, and ensure reliable production infrastructure with strong developer experience.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Lead PAM architecture and engineering for IDIRA/CyberArk Privileged Cloud, including custom CPM plugins, PSM connectors, MFA integrations, JIT access, cloud administration, and AI-agent credential vaulting. Establish onboarding standards, security controls, automation, auditability, and risk metrics across AWS, Azure, and GCP. Troubleshoot complex platform issues, remediate privileged-access risks, guide application teams, and support incident response involving compromised privileged accounts.

Lead security engineering strategy and technical roadmaps, advise on complex security decisions, drive cross-team collaboration, mentor security specialists, and evolve security controls by monitoring threats and industry trends to ensure secure-by-design delivery at scale.